StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

quarto-dev/quarto-actions/publish

quarto-dev/quarto-actions/publish

5/10
cachix/cachix-action

cachix/cachix-action

Build software only once and put it in a global cache

6/10
christophebedard/dco-check

christophebedard/dco-check

Simple DCO check script to be used in any CI

4/10
coveooss/mossy/.github/actions/image

coveooss/mossy/.github/actions/image

macOS app for managing git worktrees โ€” inline diffs, PR badges, issue tracking, IDE launch

4/10
Maintained action available
digital-ai/query-tag-action

digital-ai/query-tag-action

A GitHub Action allowing users to query tags via git describe.

3/10
step-security/tj-actions-glob

step-security/tj-actions-glob

:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.

9/10
Maintained by StepSecurity
openai/terraform-provider-openai/.github/actions/setup-release-tools

openai/terraform-provider-openai/.github/actions/setup-release-tools

The official Terraform provider for OpenAI.

5/10
dustin4444/cli-2/.github/actions/create-check

dustin4444/cli-2/.github/actions/create-check

the package manager for JavaScript

4/10
Maintained action available
ai-dynamo/modelexpress/.github/actions/fill

ai-dynamo/modelexpress/.github/actions/fill

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10
step-security/trinodb-github-actions/slash-command-dispatch

step-security/trinodb-github-actions/slash-command-dispatch

Github actions used in the Trino project. Secure drop-in replacement for trinodb/github-actions.

9/10
Maintained by StepSecurity
jmertic/slack-release-notifier

jmertic/slack-release-notifier

6/10
facebook/sapp-action

facebook/sapp-action

GitHub Action for SAPP

0/10
elastic/apm-agent-android/.github/actions/setup

elastic/apm-agent-android/.github/actions/setup

Elastic APM Android Agent

5/10
Maintained action available
rudderlabs/rudder-sdk-kotlin/.github/actions/fill

rudderlabs/rudder-sdk-kotlin/.github/actions/fill

Kotlin Android SDK and Kotlin JVM for RudderStack - the Customer Data Platform for Developers.

6/10
fumeapp/action

fumeapp/action

Deploy with fume directly from Github Actions

3/10
jessehouwing/trufflehog

jessehouwing/trufflehog

Find, verify, and analyze leaked credentials

3/10
envoyproxy/toolshed/actions/github/checkout

envoyproxy/toolshed/actions/github/checkout

7/10
yonasbsd/testcontainers-node/.github/actions/rancher-desktop-setup

yonasbsd/testcontainers-node/.github/actions/rancher-desktop-setup

Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

3/10
Maintained action available
mikehardy/buildcache-action

mikehardy/buildcache-action

GitHub Action to install and configure buildcache for faster compilation

0/10
cloudposse/atmos/.github/actions/remove-dependabot-semver-labels

cloudposse/atmos/.github/actions/remove-dependabot-semver-labels

Atmos is the open-source runtime for infrastructure โ€” it builds, authenticates, and ships Terraform, OpenTofu, Kubernetes, Helm, and containers the same way on your laptop, in CI, and with AI agents.

6/10